joomshaper.com vulnerabilities
42 published CVEs name joomshaper.com among the affected products.
- Published CVEs
- 42
- Last 12 months
- 42
- Critical
- 7
- Known exploited
- 0
Critical 7High 21Medium 14Low 0Not scored 0
Newest CVEs
- CVE-2026-103419
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.
joomshaper.com · Helix Ultimate extension for Joomla
High8.6 - CVE-2026-105602
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.
joomshaper.com · Helix Ultimate extension for Joomla
High8.6 - CVE-2026-102426
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2
joomshaper.com · SP Page Builder (Pro) extension for Joomla
Medium5.3 - CVE-2026-90903
Joomla Extension - joomshaper.com - Missing CSRF Token Verification across Administrator AJAX API Endpoints in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High7.2 - CVE-2026-90901
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Media Image Deletion in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High8.6 - CVE-2026-90905
Joomla Extension - joomshaper.com - Missing CSRF and Access Control on Site Configuration Update in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High7.2 - CVE-2026-90902
Joomla Extension - joomshaper.com - Authenticated, Privileged SQL Injection in Coupon Bulk Update in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High8.6 - CVE-2026-90904
Joomla Extension - joomshaper.com - Broken Access Control (ACL Bypass) in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High8.6 - CVE-2026-90899
Joomla Extension - joomshaper.com - Unauthenticated PII Exposure via IDOR in Guest Checkout in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
High8.2 - CVE-2026-90900
Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Storefront Product Review Submission in Easy Store extension 1.0.0-3.0.0
joomshaper.com · Easy Store extension for Joomla
Medium5.3
Products with the most CVEs
Most common weaknesses
- CWE-284 Improper access control10
- CWE-89 SQL injection8
- CWE-79 Cross-site scripting (XSS)7
- CWE-22 Path traversal6
- CWE-352 Cross-site request forgery (CSRF)5
- CWE-200 Exposure of sensitive information2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-807 2
- CWE-201 1
- CWE-434 Unrestricted file upload1